Book Image

Mastering AWS Security

By : Albert Anthony

Book Image

Mastering AWS Security

By: Albert Anthony

Overview of this book

Mastering AWS Security starts with a deep dive into the fundamentals of the shared security responsibility model. This book tells you how you can enable continuous security, continuous auditing, and continuous compliance by automating your security in AWS with the tools, services, and features it provides. Moving on, you will learn about access control in AWS for all resources. You will also learn about the security of your network, servers, data and applications in the AWS cloud using native AWS security services. By the end of this book, you will understand the complete AWS Security landscape, covering all aspects of end - to -end software and hardware security along with logging, auditing, and compliance of your entire IT environment in the AWS cloud. Lastly, the book will wrap up with AWS best practices for security.

Preface

What this book covers

What you need for this book

Who this book is for

Readers feedback

Customer support

Free Chapter

Overview of Security in AWS

Overview of Security in AWS

Chapter overview

AWS shared security responsibility model

AWS Security responsibilities

Customer security responsibilities

AWS account security features

AWS Security services

AWS Security resources

AWS Identity and Access Management

AWS Identity and Access Management

Chapter overview

IAM features and tools

IAM Authentication

IAM Authorization

Passwords Policy

AWS credentials

IAM limitations

IAM best practices

AWS Virtual Private Cloud

AWS Virtual Private Cloud

Chapter overview

VPC features and benefits

VPC best practices

Data Security in AWS

Data Security in AWS

Chapter overview

Encryption and decryption fundamentals

Securing data at rest

Securing data in transit

Securing Servers in AWS

Securing Servers in AWS

EC2 Security best practices

Amazon Inspector

Securing Applications in AWS

Securing Applications in AWS

AWS Web Application Firewall (WAF)

Signing AWS API requests

Amazon API Gateway

Monitoring in AWS

Monitoring in AWS

Monitoring Amazon EC2

Logging and Auditing in AWS

Logging and Auditing in AWS

AWS CloudWatch Logs

Auditing in AWS

AWS Trusted Advisor

AWS Service Catalog

AWS Security Audit Checklist

AWS Security Best Practices

AWS Security Best Practices

Shared security responsibility model

IAM security best practices

Security of servers

Application security

Monitoring, logging, and auditing

Customer Reviews

5 star

0

4 star

0

3 star

0

2 star

0

1 star

0

Security of servers

Let us look at best practices to secure your servers in AWS cloud:

Use IAM roles for EC2: Always use IAM roles instead of IAM users for applications running on your EC2 instances. Assign a role to your EC2 instance for accessing other AWS services. This way, credentials for the role will not be stored in your EC2 instance like they are in case of an IAM user.
Use ELB: Put all your EC2 instances behind AWS ELB when applicable. In this configuration, you will shield your instances from receiving traffic directly from the internet and they will receive traffic only from the AWS ELB.
Security group configuration: A security group is a virtual firewall for your instance. It is imperative to configure it to secure your instances. Avoid allow all traffic, that is, opening up all ports for CIDR range of 0.0.0.0/0 in your security group. Instead, allow a limited range...